Distributed patch distribution

Abstract

Distributed distribution of patches and other updates is disclosed. A request for an update is received. In some embodiments it is determined whether the source of the request will serve as a redistribution point. If the source will serve as a redistribution point, a redistribution identifier associated with the source is stored. In some embodiments it is determined whether the update will be provided to the source of the request directly, e.g., from a (more) primary source of the update, such as a source that received the request, or indirectly, e.g., from a secondary source such as a host to which a (more) primary source provided the update previously. The request is serviced either directly or indirectly, in accordance with the determination.

Description

CROSS REFERENCE TO OTHER APPLICATIONS[0001]This application claims priority to U.S. Provisional Patent Application No. 60 / 613,909 entitled CONTAGION ISOLATION AND INOCULATION filed Sep. 27, 2004, which is incorporated herein by reference for all purposes.BACKGROUND OF THE INVENTION[0002]Software vendors, and particularly vendors of computer security software, data, definitions, etc., typically from time to time have a need to distribute updates to users. For example, a vendor of a software application may become aware of a vulnerability or other defect and may desire to distribute to users an update or “patch” to eliminate the vulnerability or other defect. Similarly, security software vendors, such as vendors of anti-virus software, have a need to periodically provide users with updated virus and / or other threat definitions and / or signatures, so that their programs will detect more recently released and / or identified threats. A problem arises, however, when numerous users desire to...

AI Technical Summary

Problems solved by technology

A problem arises, however, when numerous users desire to download an update at the same time, because the vendor typically has limited processing capacity and communication bandwidth available to service requests for the update.

In some cases, an update server established by the vendor may itself become the target of an attack seeking to deny users access to the update.

The lack of more immediate access to the update may in some cases leave at least some users vulnerable to attack for a longer period, potentially resulting in a higher degree of network-wide exploitation of a vulnerability or other defect than would have occurred had updates been distributed more quickly and / or efficiently.

Images